Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/521afd0e-d4dc-449b-89c3-9881a2bfd053.cer
File:                     521afd0e-d4dc-449b-89c3-9881a2bfd053.cer (raw, json)
Hash identifier:          dqGzQs7fnAchf1d6B7/3m+cj6sfqc3THgH2B4p5IFFk=
Subject key identifier:   41:66:D3:E4:6F:47:2B:AC:BC:A0:5D:EF:EA:52:F2:74:6F:2D:01:DA
Authority key identifier: 2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52
Certificate issuer:       /CN=69fd0156-bb1f-48b6-bf32-c9492286f195
Certificate serial:       010D0C9F432858472E432A30D54263E999445F10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/521afd0e-d4dc-449b-89c3-9881a2bfd053/521afd0e-d4dc-449b-89c3-9881a2bfd053.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/521afd0e-d4dc-449b-89c3-9881a2bfd053/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Wed 11 Sep 2024 17:02:28 +0000
Certificate not after:    Tue 15 Dec 2026 18:02:28 +0000
Subordinate resources:    AS: 46626

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:2e:43:2a:30:d5:42:63:e9:99:44:5f:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69fd0156-bb1f-48b6-bf32-c9492286f195
        Validity
            Not Before: Sep 11 17:02:28 2024 GMT
            Not After : Dec 15 18:02:28 2026 GMT
        Subject: CN=521afd0e-d4dc-449b-89c3-9881a2bfd053
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:3a:5f:b7:15:c6:16:39:1f:f9:6e:69:cf:88:
                    f1:2b:48:20:df:e9:72:4c:e7:37:35:fe:98:f7:95:
                    cc:df:af:aa:94:c1:bd:c6:ab:5f:0e:34:85:b7:f7:
                    a8:4a:89:9e:8a:97:d9:cb:c0:92:8d:f1:b2:12:33:
                    2f:13:7b:00:e8:46:0f:4d:20:e9:2d:eb:8c:6d:e9:
                    be:50:1c:46:60:38:7e:01:c0:d2:9f:fb:6e:7c:c3:
                    e1:a3:ac:ff:4e:31:7f:46:02:2c:fb:e4:f4:32:eb:
                    35:58:3d:54:43:a0:80:20:33:a0:7e:05:99:d5:ad:
                    eb:e8:54:ef:c9:45:16:13:53:ce:f5:53:f1:e5:ab:
                    c0:55:51:34:7a:1c:2d:29:2f:9d:f9:59:5b:a6:f7:
                    c6:a5:2e:9e:40:f6:f8:f6:ba:49:f9:bd:dd:84:d5:
                    64:32:25:f9:7b:53:e0:95:27:71:b2:f6:47:0c:0d:
                    86:6a:f7:ce:f4:ff:6d:8a:80:0b:6e:17:19:d6:33:
                    38:cf:fc:d3:68:8d:55:4a:26:79:ed:84:ec:f5:7e:
                    5f:24:36:2d:41:3a:7b:5e:d4:0a:32:8c:b3:cb:b0:
                    c1:97:ec:40:81:5a:62:a9:c0:0c:6d:cd:27:7e:c3:
                    02:08:18:b6:ce:17:ca:7b:59:5f:1c:81:b5:fb:db:
                    dc:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:66:D3:E4:6F:47:2B:AC:BC:A0:5D:EF:EA:52:F2:74:6F:2D:01:DA
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/521afd0e-d4dc-449b-89c3-9881a2bfd053/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/521afd0e-d4dc-449b-89c3-9881a2bfd053/521afd0e-d4dc-449b-89c3-9881a2bfd053.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl

            X509v3 Authority Key Identifier:
                keyid:2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  46626

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:a6:7d:53:be:6b:e1:67:0d:c0:96:f9:56:2b:54:31:ea:fc:
         dd:0a:87:e2:ec:02:40:16:c9:0a:3b:f0:0b:45:9d:91:af:7c:
         6f:e8:f6:44:c4:ba:0a:81:dd:5f:af:90:a7:a1:76:5f:1e:3c:
         9a:e0:86:93:cc:b6:41:df:b8:7c:75:5e:e2:41:26:31:cb:0b:
         b8:72:3b:25:0a:3a:b5:cc:1a:9d:a2:d0:92:65:b4:ec:be:65:
         85:df:65:42:19:c7:6e:c3:b3:3b:d0:6c:f8:01:4a:6f:22:d3:
         eb:e9:9b:19:11:00:1b:5b:2d:09:ce:7a:7f:52:b3:e4:8e:d3:
         79:34:81:99:b5:71:bc:01:5e:cb:0b:d0:90:83:0c:56:a8:61:
         b2:06:70:13:b0:79:66:fe:44:ef:8c:2c:ba:f4:98:39:e8:81:
         a6:8d:cb:71:77:30:54:21:be:39:8d:92:d1:be:b8:db:75:63:
         76:18:ea:9b:84:e2:e7:9c:5b:ed:44:97:a4:ce:05:ab:94:82:
         c0:18:1c:46:66:1a:08:ba:1e:3f:2e:1e:95:79:3e:05:c2:94:
         88:1e:32:eb:65:83:d3:f2:33:15:41:85:86:f2:ac:e0:6a:6e:
         5e:11:53:3f:a0:f7:8c:90:24:ff:25:c0:85:5a:2b:9a:75:1b:
         ce:9d:4b:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----